teamviewer access

[Ibrahim Jamil]

Hi Experts

how to stops teamviewer, i have users let others colleague access their PCs in the the company from home using the innternet, i have asa 5540 with an acl applied on the outside interface facing the CE Router,how to block this kind of access?

thanks

jamil

[Matt Warrillow]

As far as I know teamviewer uses port 80 to communicate so port blocking isnt really an option. But if you were to block access to *teamviewer.com and *dyngate.com then that should stop the client talking back so the connections will fail.

Something like this may work

regex TV-RGX “\.teamviewer\.com”
regex DG-RGX “\.dyngate\.com”

class-map type regex match-any TV-CLS
match regex DG-RGX
match regex TV-RGX

policy-map type inspect dns TV-PLC
parameters
message-length maximum 512
match domain-name regex class TV-CLS
drop

policy-map global_policy
class inspection_default
inspect dns TV-PLC

service-policy global_policy global